52.191.66.21
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
No reports in the last 60 days
52.191.66.21 has been reported 12 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
12 from
12 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Blocked: Reason='Auto-block via DW'; Requests=0
|
Hacking | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 42 malicious requests on 2025-11-30 (e.g., env/backup probes, brute-force, or error bursts).
|
Hacking Web App Attack SSH | |
| 🇧🇪 cmbplf |
6.216 4xx requests in 1 hour (2w6d12h)
|
Brute-Force Bad Web Bot | |
| 🇩🇪 Vegascosmetics |
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 todix |
WebAttack or semilar from 52.191.66.21
|
Web App Attack | |
| 🇨🇭 backslash |
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
|
Bad Web Bot | |
| Anonymous |
Multiple web server 400 error codes from same source ip
|
Web App Attack | |
| 🇺🇸 rayxis.com |
[Sun Nov 30 17:13:39.739261 2025] [proxy_fcgi:error] [pid 2253902:tid 2253942] [client 52.191.66.21:3629] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
...
|
Bad Web Bot Web App Attack | |
| 🇺🇸 myagent.site |
Blocking for trying to access an exploit file: /admin.php
|
Hacking | |
| Anonymous |
|
Hacking Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from 4 different servers
|
Brute-Force Web App Attack | |
| 🇨🇭 zynex |
URL Probing: /akcc.php
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown